200 to 283

Question 1

Your company completed the acquisition of a startup and is now merging the IT systems of both companies. The startup had a production Google Cloud project in their organization. You need to move this project into your organization and ensure that the project is built to your organization’s standards. You want to accomplish this task with minimal effort. What should you do?

Answer 1

Use the projects.move method to move the project to your organization. Update the billing account of the project to that of your organization. Ensure that you have an organization administrator identity and access management (IAM) role assigned to you in both organizations.

Question 2

All development (Dev) teams in your organization are located in the United States. Each Dev team has its own Google Cloud project. You want to restrict access so that each Dev team can only create Cloud resources in the United States (US). What should you do?

Answer 2

Create a folder to contain all the Dev projects. Create an organization policy to limit resources in US locations.

Question 3

You are configuring Cloud DNS. You want to create DNS records to point home.mydomain.com and www.mydomain.com to the IP address of your Google Cloud load balancer. What should you do?

Answer 3

Create one A record to point mydomain.com to the load balancer and create two CNAME records to point www and home to mydomain.com, respectively.

Question 4

You have two subnets, Subnet A and Subnet B, in the default VPC. Your database servers are running in Subnet A, and your application servers and web servers are running in Subnet B. You want to configure a firewall rule that only allows database traffic from the application servers to the database servers. What should you do?

Answer 4

Create service accounts ‘sa_app’ and ‘sa_db’. Associate service account ‘sa_app’ with the application servers and the service account ‘sa_db’ with the database servers. Create an Ingress firewall rule to allow network traffic from Source service account ‘sa_app’ to Target service account ‘sa_db’.

Question 5

Your team wants to deploy a specific content management system (CMS) solution to Google Cloud. You need a quick and easy way to deploy and install the solution. What should you do?

Answer 5

Search for the CMS solution in Google Cloud Marketplace, then deploy the solution directly from Cloud Marketplace.

Question 6

You are working for a startup that was officially registered as a business 6 months ago. As your customer base grows, your use of Google Cloud increases. You want to allow all engineers to create new projects without asking them for their credit card information. What should you do?

Answer 6

Create a billing account, associate a payment method with it, and provide all project creators with permission to associate that billing account with their projects.

Question 7

Your continuous integration and delivery (CI/CD) server can’t execute Google Cloud actions in a specific project because of permission issues. You need to validate whether the used service account has the appropriate roles in the specific project. What should you do?

Answer 7

Open the Google Cloud console and check the identity and access management (IAM) roles assigned to the service account at the project or inherited from the folder or organization levels.

Question 8

Your team is using Linux instances on Google Cloud. You need to ensure that your team logs into these instances in the most secure and cost-efficient way. What should you do?

Answer 8

Use the Cloud Compute SSH command with the tunnel through a proxy flag, allowing SSH traffic from the IP range 352.352.40.20/20 on Port 22.

Question 9

An external member of your team needs list access to compute images and disks in one of your projects. You want to follow Google recommended practices when you grant the required permissions to this user. What should you do?

Answer 9

Create a custom role and add all the required compute.disks.list and compute.images.list permissions as included permissions. Grant the custom role to the user at the project level.

Question 10

You are running a web application on Cloud Run for a few hundred users. Some of your users complain that the initial web page of the application takes much longer to load than the following pages. You want to follow Google’s recommendations to mitigate the issue. What should you do?

Answer 10

Set the minimum number of instances for your Cloud Run service to three.

Question 11

You are building a data lake on Google Cloud for your Internet of Things (IoT) application. The IoT application has millions of sensors that are constantly streaming structured and unstructured data to your backend in the cloud. You want to build a highly available and resilient architecture based on Google recommended practices. What should you do?

Answer 11

Stream data to Pub/Sub and use Dataflow to send data to Cloud Storage.

Question 12

You are running out of primary internal IP addresses in a subnet for a custom mode VPC. The subnet has the IP range 10.0.0.0/20, and the IP addresses are primarily used by virtual machines in the project. You need to provide more IP addresses for the virtual machines. What should you do?

Answer 12

Change the subnet IP range from 10.0.0.0/20 to 10.0.0.0/18.

Question 13

Your company requires all developers to have the same permissions regardless of the Google Cloud project they are working on. Your company’s security policy also restricts developer permissions to Compute Engine, Cloud Functions, and Cloud SQL. You want to implement the security policy with minimal effort. What should you do?

Answer 13

Add all developers to a Google Group in Cloud Identity. Create a custom role with Compute Engine, Cloud Functions, and Cloud SQL permissions at the Google Cloud organization level. Assign the custom role to the Google Group.

Question 14

You are working for a hospital that stores its medical images in an on-premises data room. The hospital wants to use cloud storage for archival storage of these images. The hospital wants an automated process to upload any new medical images to cloud storage. You need to design and implement a solution. What should you do?

Answer 14

Create a script that uses the Cloud Storage command to synchronize the on-premises storage with cloud storage. Schedule the script as a cron job.

Question 15

Your company has an internal application for managing transactional orders. The application is used exclusively by employees in a single physical location. The application requires strong consistency, fast queries, and guaranteed availability for multiple transactional updates. The first version of the application is implemented in PostgreSQL, and you want to deploy it to the cloud with minimal code changes. Which database is most appropriate for this application?

Answer 15

Cloud SQL

Question 16

Your company runs one batch process on an on-premises server that takes around 30 hours to complete. The task runs monthly, can be performed offline, and must be restarted if interrupted. You want to migrate this workload to the cloud while minimizing cost. What should you do?

Answer 16

Migrate the workload to a Compute Engine VM, starting and stopping the instance as needed.

Question 17

You are planning to migrate the following on-premises data management solutions to Google Cloud: one MySQL cluster for your main database, Apache Kafka for your event streaming platform, and one Cloud SQL for PostgreSQL database for your analytical and reporting needs. You want to implement Google recommended solutions for the migration. You need to ensure that the new solutions provide global scalability and require minimal operational and infrastructure management. What should you do?

Answer 17

Migrate from MySQL to Cloud Spanner, from Kafka to Pub/Sub, and from Cloud SQL for PostgreSQL to BigQuery.

Question 18

During a recent audit of your existing Google Cloud resources, you discovered several users with email addresses outside of your Google Workspace domain. You want to ensure that your resources are only shared with users whose email addresses match your domain. You need to remove any mismatched users and want to avoid having to audit your resources to identify mismatched users. What should you do?

Answer 18

Set an organizational policy constraint to limit identities by domain and then retroactively remove the existing mismatched users.

Question 19

Your application is running on Google Cloud in a Managed Instance Group (MIG). You notice errors in Cloud Logging indicating that one of the processes is not responsive. You want to replace this VM in the MIG quickly. What should you do?

Answer 19

Use the gcloud compute instance-groups managed recreate-instances command to recreate the VM.

Question 20

You want to permanently delete a pub/sub topic managed by Config Connector in your Google Cloud project. What should you do?

Answer 20

Use kubectl to delete the topic resource.

Question 21

Your company is using Google Workspace to manage employee accounts. Anticipated growth will increase the number of personnel from 100 employees to 1,000 employees within 2 years. Most employees will need access to your company’s Google Cloud account. The systems processes will need to support 10x growth without performance degradation, unnecessary complexity, or security issues. What should you do?

Answer 21

Turn on identity federation between Cloud Identity and Google Workspace, enforce multi-factor authentication for domain-wide delegation.

Question 22

You want to host your video encoding software on Compute Engine. Your user base is growing rapidly, and users need to be able to encode their videos at any time without interruption or CPU limitations. You must ensure that your encoding solution is highly available and you want to follow Google recommended practice to automate operations. What should you do?

Answer 22

Deploy your solution to an instance group and set the autoscaling based on CPU utilization.

Question 23

Your managed instance group raised an alert stating that new instance creation has failed to create new instances. You need to solve the instance creation problem. What should you do?

Answer 23

Create an instance template that contains valid syntax which will be used by the instance group. Delete any persistent disks with the same name as instance names.

Question 24

You have created an application that is packaged into a Docker image. You want to deploy the Docker image as a workload on Google Kubernetes Engine. What should you do?

Answer 24

Upload the image to Artifact Registry and create a Kubernetes deployment referencing the image.

Question 25

You are using Looker Studio to visualize a table from your data warehouse that is built on top of BigQuery. Data is appended to the data warehouse during the day. At night, the daily summary is recalculated by overwriting the table. You just noticed that the charts in Looker Studio are broken and you want to analyze the problem. What should you do?

Answer 25

Use the BigQuery interface to review the nightly job and look for any errors.

Question 26

You have a batch workload that runs every night and uses a large number of virtual machines (VMs). It is fault-tolerant and can tolerate some of the VMs being terminated. The current cost of VMs is too high. What should you do?

Answer 26

Run a test using simulated maintenance events. If the test is successful, you spot in two standard VMs when running future jobs.

Question 27

You created several resources in multiple Google Cloud projects. All projects are linked to different billing accounts. To better estimate future charges, you want to have a single visual representation of all costs incurred. You want to include new cost data as soon as possible. What should you do?

Answer 27

Configure billing data export to BigQuery and visualize the data in Looker Studio.

Question 28

Your company has a large quantity of unstructured data in different file formats. You want to perform ETL transformations on the data. You need to make the data accessible on Google Cloud so it can be processed by a Dataflow job. What should you do?

Answer 28

Upload the data to Cloud Storage using the Cloud Storage command.

Question 29

You have deployed an application on a single Compute Engine instance. The application writes logs to disk. Users start reporting errors with the application. You want to diagnose the problem. What should you do?

Answer 29

Install and configure the Ops Agent and view the logs from Cloud Logging.

Question 30

You recently received a new Google Cloud project with an attached billing account where you will work. You need to create instances, set firewalls, and store data in Cloud Storage. You want to follow Google recommended practices. What should you do?

Answer 30

Use the Cloud services enable Compute.googleapis.com command to enable Compute Engine and the Cloud services enable Storage-api.googleapis.com command to enable the Cloud Storage APIs.

Question 31

Your application development team has created Docker images for an application that will be deployed on Google Cloud. Your team does not want to manage the infrastructure associated with this application. You need to ensure that the application can scale automatically as it gains popularity.

Answer 31

Upload Docker images to Artifact Registry and deploy the application on Cloud Run.

Question 32

You are migrating a business-critical application from your local data center into Google Cloud as part of your high availability strategy. You want to ensure that any data used by the application will be immediately available if a zonal failure occurs. What should you do?

Answer 32

Store the application data on a regional persistent disk. If an outage occurs, create an instance in another Zone with this disk attached.

Question 33

The devops group in your organization needs full control of compute engine resources in your development project. However, they should not have permission to create or update any other resources in the project. You want to follow Google’s recommendations for setting permissions for the devops group. What should you do?

Answer 33

Grant the basic role roles/viewer and the predefined role roles/compute.admin to the devops group.

Question 34

Your team is running an on-premises e-commerce application. The application contains a complex set of microservices written in Python, and each microservice is running on Docker containers. Configurations are injected by using environment variables. You need to deploy your current application to a serverless Google Cloud solution. What should you do?

Answer 34

Use your existing CI/CD pipeline, use the generated Docker images, and deploy them to Cloud Run. Update the configurations and the required endpoints.

Question 35

You are running multiple microservices in a Kubernetes Engine cluster. One microservice is rendering images, requiring a large amount of CPU time compared to memory. The other microservices are optimized for N2 standard machine types. You need to optimize your cluster so that all workloads are using resources efficiently. What should you do?

Answer 35

Create a node pool with compute-optimized machine type nodes for the image rendering microservice. Use the node pool with general-purpose machine type nodes for the other microservices.

Question 36

You are working in a team that has developed a new application that needs to be deployed on Kubernetes. The production application is business critical and should be optimized for reliability. You need to provision a Kubernetes cluster and want to follow Google recommended practices. What should you do?

Answer 36

Create a GKE Autopilot cluster and enroll the cluster in the stable release Channel.

Question 37

You are responsible for a web application on Compute Engine. You want your support team to be notified automatically if users experience high latency for at least 5 minutes. You need a Google recommended solution with no development cost. What should you do?

Answer 37

Create an alert policy to send a notification when the HTTP response latency exceeds the specified threshold.

Question 38

You have an on-premises data analytics set of binaries that processes data files in memory for about 45 minutes every midnight. The sizes of those data files range from 1 GB to 16 GB. You want to migrate this application to Google Cloud with minimal effort and cost. What should you do?

Answer 38

Lift and shift to a VM on Compute Engine, use an instance schedule to start and stop the instance.

Question 39

When you use the cloud container clusters command to create two Google Cloud Kubernetes GKE clusters, prod cluster and Dev cluster, where prod cluster is a standard cluster and Dev cluster is an autopilot cluster, and when you run the kubectl get nodes command, you only see the nodes from prod cluster. Which command should you run to check the node status for Dev cluster?

Answer 39

cloud container clusters get credentials Dev cluster; kubectl get nodes

Question 40

You recently discovered that your developers are using many service account Keys during their development process. While you work on a long-term Improvement, you need to quickly Implement a process to enforce shortlived service account credentials in your company. You have the following requirements :

1. All service accounts requiring a key should be created in a centralized project called “pj-sa”.
2. Service account keys should only be valid for one day.

You need a Google recommended solution that minimizes cost,
what should you?

Answer 40

Enforce IAM policy constraints allowing a 24-hour lifetime for service account keys: This option directly addresses the one-day validity requirement and can be a cost-effective solution. It’s in line with Google’s recommended practices.

Question 41

Your company is running a three-tier web application on virtual machines that use a MySQL database. You need to create an estimated total cost of cloud infrastructure to run this application on Google Cloud instances and Cloud SQL. What should you do?

Answer 41

Use the Google Cloud pricing calculator to determine the cost of every Google Cloud resource you expect to use. Use similar size instances for the web server and use your current on-premises machines as a comparison for Cloud SQL.

Question 42

You have a big table instance that consists of three nodes that store personally identifiable information (PII) data. You need to log all read or write operations, including any metadata or configuration reads of this database table, in your company’s security information and event management (SIEM) system. What should you do?

Answer 42

Navigate to the audit logs page in the Google Cloud console and enable data read, data write, and admin read logs for the Bigtable instance. Create a Pub/Sub topic as a Cloud Logging sync destination and add your SIEM as a subscriber to the topic.

Question 43

You want to set up a Google Kubernetes Engine cluster. Verifiable node identity and integrity are required for the cluster, and nodes cannot be accessed from the internet. You want to reduce the operational cost of managing your cluster, and you want to follow Google recommended practices. What should you do?

Answer 43

Deploy a private autopilot cluster.

Question 44

Your company wants to migrate their on-premises workloads to Google Cloud. The current on-premises workloads consist of
1. A Flask web application
2. A backend API
3. A scheduled long-running background job for ETL and Reporting

You need to keep operational costs low. You want to follow Google recommended practices to migrate these workloads to serverless solutions on Google Cloud. What should you do?

Answer 44

Migrate the web application to App Engine and the backend API to Cloud Run. Use Cloud Tasks to run your background job on Cloud Run.

Question 45

Your company is moving its continuous integration and delivery (CI/CD) pipeline to Compute Engine instances. The pipeline will manage the entire Cloud infrastructure through code. How can you ensure that the pipeline has appropriate permissions while your system is following security best practices?

Answer 45

Create multiple service accounts, one for each pipeline, with the appropriate minimal Identity and Access Management (IAM) permissions
Use a Secret Manager service to store the key files of the service accounts
Allow the CI/CD pipeline to request the appropriate secrets during the execution of the pipeline.

Question 46

Your application stores files on cloud storage by using the standard storage class. The application only requires access to files created in the last 30 days. You want to automatically save costs on files that are no longer accessed by the application. What should you do?

Answer 46

Create an object lifecycle on the storage bucket to change the storage class to Archive storage for objects with an age over 30 days.

Question 47

Your manager asks you to deploy a workload to a Kubernetes cluster. You are not sure of the workload’s resource requirements or how the requirements might vary depending on usage patterns, external dependencies, or other factors. You need a solution that makes cost-effective recommendations regarding CPU and memory requirements and allows the workload to function consistently in any situation. You want to follow Google recommended practices. What should you do?

Answer 47

Configure the horizontal pod autoscaler for availability and configure the vertical pod autoscaler recommendations for suggestions

Question 48

You need to migrate invoice
documents stored on premises to cloud
storage. The documents have the following
storage requirements:

1. Documents must be kept for 5 years.
   2Up to five revisions of the same invoice document must be stored
   t o allow for Corrections.
2. Documents older than 365 days should be moved to lower cost storage tiers.

You want to follow Google recommended practices to minimize your operational and development costs. What should you do?

Answer 48

Enable object versioning on the bucket, use lifecycle conditions to change the storage class of objects, set the number of versions, and delete old files.

Question 49

You’ve installed the Google Cloud CLI on your workstation and configured the proxy settings. However, you’re concerned about your proxy credentials potentially being logged in the cloud CLI logs. What action should you take to prevent your proxy credentials from being logged?

Answer 49

Set the CLOUDSDK_PROXY_USERNAME and CLOUDSDK_PROXY_PASSWORD properties using environment variables in your command-line tool.

Question 50

Your company developed an application to deploy on Google Kubernetes Engine. Certain parts of the application are not fault-tolerant and are allowed to have downtime. Other parts of the application are critical and must always be available. You need to configure a Google Kubernetes Engine cluster while optimizing for cost. What should you do?

Answer 50

Create a cluster with both a Spot VM node pool and a nods pool by using standard VMs. Deploy the critical deployments on the node pool by using standard VMs and the fault-tolerant deployments on the Spot VM node pool.

Question 51

You need to deploy an application in Google Cloud using serverless technology. You want to test a new version of the application with a small percentage of production traffic. What should you do?

Answer 51

Deploy the application to Cloud Run. Use gradual rollouts for traffic splitting.

Question 52

Your company’s security vulnerability management policy wants a member of the security team to have visibility into vulnerabilities and other OS metadata for a specific Compute Engine instance. This Compute Engine instance hosts a critical application in your Google Cloud project. You need to implement your company’s security vulnerability management policy. What should you do?

Answer 52

• Ensure that the OS Config agent is installed on the Compute Engine instance.
• Provide the security team member roles/osconfig.vulnerabilityReportViewer permission.

Question 53

You want to enable your development team to deploy new features to an existing Cloud Run service in production. To minimize the risk associated with a new revision, you want to reduce the number of customers who might be affected by an outage without introducing any development or operational costs to your customers. You want to follow Google-recommended practices for managing revisions to a service. What should you do?

Answer 53

Gradually roll out the new revision and split customer traffic between the revisions to allow rollback in case a problem occurs.

Question 54

You have deployed an application on a Compute Engine instance. An external consultant needs to access the Linux-based instance. The consultant is connected to your corporate network through a VPN connection, but the consultant has no Google account. What should you do?

Answer 54

Instruct the external consultant to generate an SSH key pair, and request the public key from the consultant. Add the public key to the instance yourself, and have the consultant access the instance through SSH with their private key.

Question 55

After a recent security incident, your startup company wants better insight into what is happening in the Google Cloud environment. You need to monitor unexpected firewall changes and instance creation. Your company prefers simple solutions. What should you do?

Answer 55

Use Cloud Logging filters to create log-based metrics for firewall and instance actions. Monitor the changes and set up reasonable alerts. Most Voted

Question 56

You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery datasets in crm-databases-proj. You want to follow Google-recommended practices to give access to the service account in the web-applications project. What should you do?

Answer 56

Give bigquery.dataViewer role to crm-databases-proj and appropriate roles to web-applications.

Question 57

Your Dataproc cluster runs in a single Virtual Private Cloud (VPC) network in a single subnet with range 172.16.20.128/25. There are no private IP addresses available in the VPC network. You want to add new VMs to communicate with your cluster using the minimum number of steps. What should you do?

Answer 57

Modify the existing subnet range to 172.16.20.0/24.

Question 58

You are building a backend service for an ecommerce platform that will persist transaction data from mobile and web clients. After the platform is launched, you expect a large volume of global transactions. Your business team wants to run SQL queries to analyze the data. You need to build a highly available and scalable data store for the platform. What should you do?

Answer 58

Create a multi-region Cloud Spanner instance with an optimized schema.

Question 59

You are in charge of provisioning access for all Google Cloud users in your organization. Your company recently acquired a startup company that has their own Google Cloud organization. You need to ensure that your Site Reliability Engineers (SREs) have the same project permissions in the startup company’s organization as in your own organization. What should you do?

Answer 59

Use the gcloud iam roles copy command, and provide the Organization ID of the startup company’s Google Cloud Organization as the destination.

Question 60

You need to extract text from audio files by using the Speech-to-Text API. The audio files are pushed to a Cloud Storage bucket. You need to implement a fully managed, serverless compute solution that requires authentication and aligns with Google-recommended practices. You want to automate the call to the API by submitting each file to the API as the audio file arrives in the bucket. What should you do?

Answer 60

Create a Cloud Function triggered by Cloud Storage bucket events to submit the file URI to the Google Speech-to-Text API.

Question 61

Your customer wants you to create a secure website with autoscaling based on the compute instance CPU load. You want to enhance performance by storing static content in Cloud Storage. Which resources are needed to distribute the user traffic?

Answer 61

An external HTTP(S) load balancer with a managed SSL certificate to distribute the load and a URL map to target the requests for the static content to the Cloud Storage backend.

Question 62

The core business of your company is to rent out construction equipment at large scale. All the equipment that is being rented out has been equipped with multiple sensors that send event information every few seconds. These signals can vary from engine status, distance traveled, fuel level, and more. Customers are billed based on the consumption monitored by these sensors. You expect high throughput – up to thousands of events per hour per device – and need to retrieve consistent data based on the time of the event. Storing and retrieving individual signals should be atomic. What should you do?

Answer 62

Ingest the data into Bigtable. Create a row key based on the event timestamp.

Question 63

You just installed the Google Cloud CLI on your new corporate laptop. You need to list the existing instances of your company on Google Cloud. What must you do before you run the gcloud compute instances list command? (Choose two.)

Answer 63

A AND E - Run gcloud auth login, enter your login credentials in the dialog window, and paste the received login token to gcloud CLI. + Run gcloud config set project $my_project to set the default project for gcloud CLI.

Question 64

You are planning to migrate your on-premises data to Google Cloud. The data includes:

• 200 TB of video files in SAN storage
• Data warehouse data stored on Amazon Redshift
• 20 GB of PNG files stored on an S3 bucket

You need to load the video files into a Cloud Storage bucket, transfer the data warehouse data into BigQuery, and load the PNG files into a second Cloud Storage bucket. You want to follow Google-recommended practices and avoid writing any code for the migration. What should you do?

Answer 64

Use Transfer Appliance for the videos, BigQuery Data Transfer Service for the data warehouse data, and Storage Transfer Service for the PNG files.

Question 65

Your company requires that google cloud products are created with a specific configuration to comply with your company’s security policies . You need to implement a mechanism that will allow software engineers at your company to deploy and update Google Cloud products in a preconfigured and approved manner. What should you do ?

Answer 65

Create terraform modules that utilize the google cloud terraform provider to configure google cloud products . Store and share the modules in a source code repository

Question 66

you have two gcp projects project-a with vpc vpc-a(10.0.0.0/16) and project-b with vpc
vpc-b (75.0.67.34/16) . Your frontend application resides in vpc-a and backend API services are deployed in vpc-b . You need to efficiently and cost effectively handle communication between these google cloud projects . You also want to follow google recommended practises . What should you do ?

Answer 66

create vpc network peering between vpc-a and vpc-b

Question 67

You use cloud logging to capture application logs . You now need to use SQL to analyze applicgation logs in cloud logging by following google recommended practices, What should you do ?

Answer 67

enable log analytics for log bucket and create export dataset to bigquery

Question 68

You want to deploy a new containerized application into Google Cloud by using a Kubernetes manifest. You want to have full control over the Kubernetes deployment, and at the same time, you want to minimize configuring infrastructure. What should you do?

Answer 68

Deploy the application on GKE Standard.

Question 69

Your team is building a website that handles votes from a large user population. The incoming votes will arrive at various rates. You want to optimize the storage and processing of the votes. What should you do?

Answer 69

Save the incoming votes to Pub/Sub. Use the Pub/Sub topic to trigger a Cloud Functions instance to process the votes.

Question 70

You are deploying an application on Google Cloud that requires a relational database for storage. To satisfy your company’s security policies, your application must connect to your database through an encrypted and authenticated connection that requires minimal management and integrates with Identity and Access Management (IAM). What should you do?

Answer 70

Deploy a Cloud SQL database and configure IAM database authentication. Access the database through the Cloud SQL Auth Proxy.

Question 71

You have two Google Cloud projects: project-a with VPC vpc-a (10.0.0.0/16) and project-b with VPC vpc-b (10.8.0.0/16). Your frontend application resides in vpc-a and the backend API services are deployed in vpc-b. You need to efficiently and cost-effectively enable communication between these Google Cloud projects. You also want to follow Google-recommended practices. What should you do?

Answer 71

Create VPC Network Peering between vpc-a and vpc-b.

Question 72

Your company is running a critical workload on a single Compute Engine VM instance. Your company’s disaster recovery policies require you to back up the entire instance’s disk data every day. The backups must be retained for 7 days. You must configure a backup solution that complies with your company’s security policies and requires minimal setup and configuration. What should you do?

Answer 72

. Configure daily scheduled persistent disk snapshots with a retention period of 7 days.

Question 73

Your company requires that Google Cloud products are created with a specific configuration to comply with your company’s security policies. You need to implement a mechanism that will allow software engineers at your company to deploy and update Google Cloud products in a preconfigured and approved manner. What should you do?

Answer 73

Create Terraform modules that utilize the Google Cloud Terraform Provider to configure Google Cloud products. Store and share the modules in a source code repository.

Question 74

You are a Google Cloud organization administrator. You need to configure organization policies and log sinks on Google Cloud projects that cannot be removed by project users to comply with your company’s security policies. The security policies are different for each company department. Each company department has a user with the Project Owner role assigned to their projects. What should you do?

Answer 74

Organize projects under folders for each department. Configure both organization policies and log sinks on the folders.

Question 75

You are deploying a web application using Compute Engine. You created a managed instance group (MIG) to host the application. You want to follow Google-recommended practices to implement a secure and highly available solution. What should you do?

Answer 75

Use HTTP(S) load balancing for the MIG and an A record in your DNS public zone with the load balancer’s IP address.

Question 76

You have several hundred microservice applications running in a Google Kubernetes Engine (GKE) cluster. Each microservice is a deployment with resource limits configured for each container in the deployment. You’ve observed that the resource limits for memory and CPU are not appropriately set for many of the microservices. You want to ensure that each microservice has right sized limits for memory and CPU. What should you do?

Answer 76

Configure a Vertical Pod Autoscaler for each microservice.

Question 77

Your company uses BigQuery to store and analyze data. Upon submitting your query in BigQuery, the query fails with a quotaExceeded error. You need to diagnose the issue causing the error. What should you do? (Choose two.)

Answer 77

B AND D = . Use the INFORMATION_SCHEMA views to analyze the underlying issue. + . Search errors in Cloud Audit Logs to analyze the issue.

Question 78

Your team has developed a stateless application which requires it to be run directly on virtual machines. The application is expected to receive a fluctuating amount of traffic and needs to scale automatically. You need to deploy the application. What should you do?

Answer 78

Deploy the application on a managed instance group and configure autoscaling.

Question 79

Your web application is hosted on Cloud Run and needs to query a Cloud SQL database. Every morning during a traffic spike, you notice API quota errors in Cloud SQL logs. The project has already reached the maximum API quota. You want to make a configuration change to mitigate the issue. What should you do?

Answer 79

Modify the maximum number of Cloud Run instances.

Question 80

You need to deploy a single stateless web application with a web interface and multiple endpoints. For security reasons, the web application must be reachable from an internal IP address from your company’s private VPC and on-premises network. You also need to update the web application multiple times per day with minimal effort and want to manage a minimal amount of cloud infrastructure. What should you do?

Answer 80

Deploy the web application on Cloud Run with Private Service Connect configured.